I'm trying to wrap my head around this global admin example: https://docs.authzed.com/reference/schema-lang#global-admin-permissions